trackem

trackem Tracker passivo di dispositivi AndroidTrackEm Mobile è uno scanner passivo in tempo reale per probe-request Wi-Fi + Bluetooth LE, progettato per OSINT, operazioni red-team e ricerca wireless. Ascolta i dispositivi client telefoni, laptop, IoT che stanno attivamente trasmettendo i nomi del...

openwifipass

OpenWifiPass Eine Open-Source-Implementierung der Grantor-Rolle in Apples Wi-Fi-Passwort-Sharing-Protokoll. Haftungsausschluss OpenWifiPass ist experimentelle Software und das Ergebnis von Reverse-Engineering-Bemühungen des Open Wireless Link-Projekts. Der Code dient ausschließlich dokumentarisch...

Sniffle

Sniffle Sniffle è uno sniffer per Bluetooth 5 e 4.x LE che utilizza hardware TI CC1352/CC26x2. Sniffle ha una serie di funzionalità utili, tra cui: Supporto per pacchetti advertisement e dati estesi BT5/4.2 Supporto per gli algoritmi di selezione del canale BT5 1 e 2 Supporto per tutte le modalit...

sparrow-wifi

Sparrow-WiFi Sparrow-WiFi è uno strumento di consapevolezza spettrale WiFi e Bluetooth a 2.4 GHz e 5 GHz per Linux. Integra scansione WiFi, scoperta Bluetooth Low Energy e Classic, analisi spettrale tramite software-defined radio HackRF, Ubertooth, tracciamento GPS, rilevamento remoto FAA RemoteI...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

Komfy-Switch-Wifi-Password-Disclosure

Komfy-Switch-Wifi-Password-Disclosure Intro Questa analisi descrive la mia scoperta sul Komfy Switch with Camera di D-Link per recuperare l'SSID e la password WiFi associati al dispositivo via bluetooth 4.0 BLE. Il Komfy switch è un prodotto per la sicurezza domestica e l'automazione che può...

CVE-2026-78685

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

EUVD-2026-65270

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685 Le-yan｜Medical Practice Management System - Remote Code Execution

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page...

CVE-2026-78685

CVE-2026-78685 affects the Le-yan Medical Practice Management System , a web-based application for managing medical practices. The vulnerability is a Remote Code Execution (RCE) flaw that allows unauthenticated remote attackers to execute arbitrary OS commands by serving a crafted HTML page that ...

CVE-2023-52709-PoC

Prova di concetto per CVE 2023-52709 "Lo stack Bluetooth TI non riesce a generare un indirizzo privato casuale risolvibile RPA portando a un DoS per dispositivi già accoppiati" CVE 2023-52709 Riepilogo Quando si esegue il test case Defensics SMP legacy 1001 con modalità loop sul DUT configurato c...

CVE-2026-72333

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee "Bluetooth: L2CAP: Fix not tracking outstanding TX ident" changed ident allocation to use an IDA, releasing idents in l2capputident when the...

CVE-2026-72333 Bluetooth: L2CAP: fix tx ident leak for commands without a response

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee "Bluetooth: L2CAP: Fix not tracking outstanding TX ident" changed ident allocation to use an IDA, releasing idents in l2capputident when the...

EUVD-2026-59232

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee "Bluetooth: L2CAP: Fix not tracking outstanding TX ident" changed ident allocation to use an IDA, releasing idents in l2capputident when the...

PT-2026-72992

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix UAF in l2cap le connect rsp l2cap le connect rsp obtains a channel via l2cap get chan by ident but neither holds a reference nor uses l2cap chan hold unless zero before locking and operating on it. A...

PT-2026-72521

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee "Bluetooth: L2CAP: Fix not tracking outstanding TX ident" changed ident allocation to use an IDA, releasing idents in l2cap put ident when th...

CVE-2026-65935

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65932

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below...

EUVD-2026-58082

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65935 Bypassing passkey entry in legacy pairing

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...